Skip to content
OpenAdvisories

Vendor

NotFound

21 known vulnerabilities.

NotFound at a glance

Last 12 months
0
Critical · all time
2
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202571
Mar 202530
Feb 202551
Jan 202560
Dec 202400

Products

WPJobBoard 4 Hero Mega Menu - Responsive WordPress Menu Plugin 3 Admin and Site Enhancements (ASE) Pro 2 Bridge Core 2 Pie Register Premium 2 Chaty Pro 1 PrivateContent 1 Macro Calculator with Admin Email Optin & Data 1 Unlimited Timeline 1 Global Gallery 1 Ad Inserter Pro 1 Callback Request 1 Brizy Pro 1
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Medium 5.4
    CVE-2025-30966

    WordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerability

    Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal. This issue affects WPJobBoard: from n/a through n/a.

    NotFound WPJobBoard
  • Critical 9.6
    CVE-2025-30967 Public exploit

    WordPress WPJobBoard plugin < 5.11.1 - CSRF to Remote Code Execution (RCE) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server. This issue affects WPJobBoard: from n/a through n/a.

    NotFound WPJobBoard
  • High 7.5
    CVE-2025-27008

    WordPress Unlimited Timeline < 1.6.1 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited Timeline: from n/a through < 1.6.1.

    NotFound Unlimited Timeline
  • High 7.1
    CVE-2025-22263

    WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Global Gallery allows Reflected XSS. This issue affects Global Gallery: from n/a through 8.8.0.

    NotFound Global Gallery
  • High 7.5
    CVE-2025-26730

    WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator with Admin Email Optin & Data. This issue affects Macro Calculator with Admin Email Optin & Data: from n/a through 1.0.

    NotFound Macro Calculator with Admin Email Optin & Data
  • Medium 4.3
    CVE-2025-30965

    WordPress WPJobBoard plugin < 5.11.1 - Multiple Cross Site Request Forgery (CSRF) vulnerabilities vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Cross Site Request Forgery. This issue affects WPJobBoard: from n/a through n/a.

    NotFound WPJobBoard
  • Medium 6.5
    CVE-2025-31409

    WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bridge Core allows Stored XSS. This issue affects Bridge Core: from n/a through n/a.

    NotFound Bridge Core
  • High 7.1
    CVE-2025-26972

    WordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.

    NotFound PrivateContent
  • Medium 6.3
    CVE-2025-26940

    WordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability

    Path Traversal vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2.

    NotFound Pie Register Premium
  • High 7.1
    CVE-2025-25129

    WordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4.

    NotFound Callback Request
  • Medium 4.3
    CVE-2025-26948

    WordPress Pie Register Premium plugin <= 3.8.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2.

    NotFound Pie Register Premium
  • Critical 10.0
    CVE-2025-26776

    WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3.

    NotFound Chaty Pro
  • High 7.1
    CVE-2025-22680

    WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39.

    NotFound Ad Inserter Pro
  • High 7.5
    CVE-2024-43333

    WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Privilege Escalation. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through 7.6.2.1.

    NotFound Admin and Site Enhancements (ASE) Pro
  • High 7.1
    CVE-2025-24781

    WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1.

    NotFound WPJobBoard
  • Medium 4.3
    CVE-2025-24744

    WordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3.

    NotFound Bridge Core
  • Medium 4.3
    CVE-2025-24653

    WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through 7.6.1.1.

    NotFound Admin and Site Enhancements (ASE) Pro
  • High 7.1
    CVE-2025-22763

    WordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1.

    NotFound Brizy Pro
  • High 7.1
    CVE-2024-49300

    WordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n…

    NotFound Hero Mega Menu - Responsive WordPress Menu Plugin Web / CMS
  • High 8.5
    CVE-2024-49333

    WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n…

    NotFound Hero Mega Menu - Responsive WordPress Menu Plugin Web / CMS
  • High 8.5
    CVE-2024-49303

    WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n…

    NotFound Hero Mega Menu - Responsive WordPress Menu Plugin Web / CMS